Your data stays yours.
Non-disclosure agreements, least-privilege access, client isolation and row-level security. How we handle sensitive information from assessment to project close.
Summary
Before seeing the data
- Non-disclosure agreement: we sign your template or send ours.
- Personal data: when the project involves personal data, we formalize that we act as a processor, following the client's instructions and only for the project's purpose.
- Minimal data: during the assessment we work with table structures and samples, with personal columns removed or masked whenever possible.
Access to data
- Named accounts created by your team, with read-only permission on sources.
- Secure connections: Power BI gateway, VPN or access published by your IT, always encrypted in transit.
- Passwords and keys kept in a password manager — never exchanged by email or chat, never stored in spreadsheets, code or delivered .pbix files.
- Access is revoked when the project ends.
Client isolation
- Power BI: reports published in the client's own tenant and workspace whenever possible; no workspaces shared between clients.
- Web dashboards: separate deployment, database and credentials for each client.
- Working files: separate folders per client, restricted to the people on the project.
Row-level security (RLS)
In Power BI, row-level security makes sure each person sees only the data they are allowed to: a team manager sees their own team, each office sees its own portfolio, and financial figures are limited to authorized roles. Roles are tested with “View as role” before delivery and documented.
Web dashboards
- HTTPS only, with security headers and authentication whenever the dashboard is not public.
- The dashboard receives only the aggregated data it needs; full tables and credentials stay on the server.
End of project
At closing we deliver the documentation, return what belongs to the client, delete working copies and ask for access to be revoked, all confirmed in writing.
Incidents
If we notice any suspected incident involving client data, we inform the client's contact without delay, with what is known so far, so they can take the steps required by law.
Frequently asked questions
Will you sign our NDA?
Yes. We can sign your company's non-disclosure agreement or send ours, before any access to data.
Do you need admin access?
No. We ask for the minimum access required, usually read-only on the sources and access to the project workspace. Your team creates and revokes the credentials.
Does the data stay on your computers?
Whenever possible, work happens inside the client's environment (Power BI tenant, database or server). When a copy is needed, it stays in a protected environment, separated per client, and is deleted at the end of the project.
Can we test first with anonymized data?
Yes. The prototype can use an anonymized sample or fictitious data with the same structure; real data is connected afterwards.
Shall we talk about your data?
The initial assessment is free and with no commitment. We can sign a non-disclosure agreement before seeing any information.